jan_starsWallpaper[.]zip | Triage

Sharing

General

Target

jan_starsWallpaper.zip
Size

9.3MB
MD5

72da9351936ae8035c04fe851d6055c1
SHA1

e2483706def9df90a7bf7c1bb4dc2a6e14255146
SHA256

9b3b1475eb3bc302acb3946c047707bf561d8b75b27cb12bf76c499f09ea58da
SHA512

2a57e9c1d8240881d407f4aef97b18b2cac04931dd2418c67901c77b0472bdedd6345c88b204c00f4a0417a42f618cd2eb3da890017941bfb6d013cce183d083
SSDEEP

196608:WJKjN4kIEUzvlZeoXL2PM5wD+//X0MvAZxVGVKvefSZOyiHbJ:4KGt9z20L2eh//X0kAZx00SHHV

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

jan_starsWallpaper.zip
.zip

Password: infected
42bd23110fbfde71be924a9bdb5a8381.apk
.apk android arch:arm arch:x86 arch:arm64 arch:x64

com.sstars.walls

com.sstars.walls.ui.splash.SplashActivity

Activities

com.sstars.walls.ui.splash.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_INTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_NETWORK_STATE
android.permission.WAKE_LOCK

Receivers

com.sstars.walls.services.ABC

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.QUICKBOOT_POWERON

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

Services